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REMARKS/ARGUMENTS 

Favorable reconsideration of this application in light of the following discussion is 
respectfully requested. 

Claims 1-18 are pending in the present application. No claims amendments are 
presented, thus, no new matter is added. 

In the Office Action, Claims 1 and 6-18 were rejected under 35 U.S.C. § 102(b) as 
anticipated by RFC 1898 (herein, CvberCash) ; Claims 2-4 were rejected under 35 U.S.C. § 
102(b) as anticipated by Boesch et al. (U.S. Pat. 5,870,473, herein Boesch); Claim 5 was 
rejected as unpatentable over CvberCash in view of Office Notice; and Claims 1,6, 15 and 16 
were rejected under 35 U.S.C. § 103(a) as unpatentable over CvberCash , in view of Request 
for Comment 793 . 

Claims 1 and 6-18 were rejected under 35 U.S.C. § 102(b) as anticipated by 
CvberCash . Applicants respectfully traverse this rejection as independent Claims 1,6, 10, 15 
and 16 recite novel features clearly not taught or rendered obvious by the applied references. 

Independent Claim 1, for example, recites a method of authentication and payment in 
an authentication and payment system that includes a terminal, at least one server, and a 
network connecting the terminal and the at least one server, the method that is carried out by 
the at least one server comprising the steps of: 

receiving a request for usage of a service from the terminal through the 
information network; 

selecting at least one situation from plural situations each of which 
identifies a network environment and a system policy, based on a description 
of a terminal network environment and a terminal system policy in a service 
certificate sent from the terminal, and 

changing a service procedure or a message format to operate the 
authentication and payment system according to the selected situation. 

Independent Claims 15 and 16, while directed to alternative embodiments, recite 

similar features. Accordingly, the remarks and arguments presented below are applicable to 

each of independent Claims 1,15 and 16. 
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Turning to the applied reference, CvberCash describes a system that includes credit 
card and electronic cash payment on the internet. According to the CvberCash system 
overview block diagram on p. 3, an internet customer (e.g., a terminal) may initiate a 
purchase from an internet merchant (e.g., service providing device) and a CvberCash server 
operates with a banking system to obtain authentication and payment (e.g., the CyberCash 
server and the banking system combined may be an example of an authentication and 
payment device). Further, CvberCash indicates that information such as a merchant ID, a 
payment type, a credit card number, a credit card type, a credit card expiration date, a note, 
and a digital signature, may be transmitted between one or more of the internet customer, 
internet merchant, and CvberCash server. 

CvberCash , however, fails to teach or suggest a server that "select[s] at least one 
situation from plural situations each of which identifies a network environment and a 
system policy, based on a description of a terminal network environment and a terminal 
system policy in a service certificate sent from the terminal" as recited in independent 
Claim 1 . 

In rejecting the above noted features recited in independent Claim 1, the Office 
Action relies on § 4.4.1 and § 4.4.2 of CvberCash , which describes the format of a message 
sent from a merchant server to a billing server to authorize a customer credit card. Thus, this 
cited portion of CvberCash merely describes the content of a message sent between the server 
and a merchant, which does not include a description of a terminal network environment 
and a terminal system policy. Further, this cited portion of CvberCash fails to teach or 
suggest "selecting a situation..." based on the information included in the certificate, 
whatsoever. 

The "Response to Arguments" portion of the Office Action also notes that 
"Applicants should note that the TCP/IP system allows data to indicate the environment and 
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policies that are present." The Office Action, however, fails to provide any support for this 
assertion. Further, TCP/IP is merely a protocol for exchanging information, and does not 
define a network environment, much less a terminal system policy, as recited in independent 
Claim 1 . 

Therefore, CvberCash fails to teach a server that "select[s] at least one situation from 
plural situations each of which identifies a network environment and a system policy, based 
on a description of a terminal network environment and a terminal system policy in a 
service certificate sent from the terminal'' as recited in independent Claim 1 

Accordingly, Applicants respectfully request that the rejection of Claims 1,15 and 16 
(and any claims that depend therefrom) under 35 U.S.C. § 102 be withdrawn. 

Independent Claim 6 recites a service providing device comprising: 

a receiver configured to receive a request for a service including a 
certificate of service sent from a terminal through an information network; 

a controller configured to select a timing of providing the service in 
response to the request for the service from the terminal 

In rejecting the above emphasized features recited in independent Claim 6, the Office 
Action cites § 3.1 and § 3.2 of CvberCash and notes that "the TCP/IP protocol inherently 
used to enable the system described in CyberCash, allows for congestion control that lets 
computers determine when to send data." As noted above, however, TCP/IP is merely a 
protocol used to exchange data between devices over a network, and does not determine 
when a service providing device provides a service in response to a request for services from 
a terminal. While TCP/IP may have certain congestion control mechanisms, these 
mechanisms are to facilitate communications between devices, and have nothing to do with 
selectfingj a timing of providing the service in response to the request for the service from 
the terminal in a service providing device, as recited in independent Claim 6. Moreover, the 
Office Action fails to specify what component of CvberCash is analogous to the claimed 
"controller." 
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Accordingly, Applicants respectfully request that the rejection of Claim 6 (and the 

claims that depend therefrom) under 35 U.S.C. § 102 be withdrawn. 

Independent Claim 10 recites, an authentication and payment device comprising: 

a certificate of service issuing unit configured to issue a certificate of 
service to an other device, the certificate of service indicating a maximum 
number of times the certificate of service may be used; and 

a processing unit configured to process at least one of verification of a 
request for authentication and payment sent from the other device through an 
information network, authentication of the received request for authentication 
and payment, permission for provision of a service that is requested by the 
request for authentication and payment, and payment for the provision of the 
service. 

In rejecting the above emphasized features of Claim 10, the Office Action relies on § 
4.5.6 of CyberCash, asserting that the CM6 message sent from the server to the merchant 
"implicitly" indicates a maximum number of uses, since they inherently only may be uses 
once. This interpretation is erroneous on two accounts. First, the CM6 message is not a 
certificate of a service, instead it is a message indicating the success or failure of a credit card 
transaction. Secondly, the CM6 message does not include any data, whatsoever, indicating a 
maximum number of times that the certificate may be used. 

Accordingly, Applicants respectfully request that the rejection of Claim 10 (and the 
claims that depend therefrom) under 35 U.S.C. § 102 be withdrawn. 

Claim 5 was rejected as unpatentable over CvberCash in view of Office Notice. 
Applicants respectfully traverse this rejection, as independent Claim 5 recites novel features 
clearly not taught or rendered obvious by the applied reference. 

Independent Claim 5 recites a terminal comprising: 

a usage history managing unit configured to manage a usage history of 
a certificate of service distributed from an authentication and payment device 
through an information network, the usage history including information 
regarding at least one previous transaction ; and 

an acknowledgement unit configured to acknowledge to the 
authentication and payment device when the usage history satisfies conditions 
defined in the certificate of service. 
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In rejecting the above emphasized claimed feature, the Office Action takes Official 

Notice arguing that usage history for logging was well known at the time of the invention. 

However, as noted above, the Office Action asserts that the "certificate" in CvberCash "may 

only be used once," therefore, it clearly would not have been well known to incorporate a 

transaction logging system into a merchant device (e.g., terminal) of the CvberCash system 

since managing the "usage history" of a certificate would not be necessary, since it may only 

be used once. 

Further, Applicants respectfully submit that official notice alone is not permissible as 

grounds for rejection in the Official Action. As stated in the MPEP at § 2144.03(A): 

It would not be appropriate for the examiner to take official notice of facts 
without citing a prior art reference where the facts asserted to be well known 
are not capable of instant and unquestionable demonstration as being well- 
known. For example, assertions of technical facts in the areas of esoteric 
technology or specific knowledge of the prior art must always be supported by 
citation to some reference work recognized as standard in the pertinent art. In 
reAhlert, 424 F.2d at 1091, 165 USPQ at 420-21. 

With regard to the above, Applicants respectfully submit that the features 
advantageously recited in Claim 5 are not "capable of instant and unquestionable 
demonstration as being well-known." 

Accordingly, Applicants respectfully request that the rejection of Claim 10 (and the 
claims that depend therefrom) under 35 U.S.C. § 103 be withdrawn. 

Claims 2-4 were rejected under 35 U.S.C. § 102(b) as anticipated by Boesch . 
Applicants respectfully traverse this rejection as independent Claim 2 recites novel features 
clearly not taught or rendered obvious by the applied reference. 

Claim 2 recites a terminal comprising: 

a receiver configured to receive a first certificate of service including 
information from an authentication and payment device and a digital 
signature through an information network', and 

a transmitter configured to generate a second certificate of service 
based on the first certificate of service, the second certificate of service 
including identification information of the terminal, and to transmit the second 
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certificate of service to a service providing device through the information 
network. 

Boesch describes a system and method relating to secure communications in a 
communication network. More specifically, Boesch describes using sessions having limited 
duration to enable parties to communicate securely, and that the session of one party is 
independent from the session of another party. All sessions are linked at a server, which 
confirms that the sessions are valid. 

Boesch , however, fails to disclose a terminal including "a receiver configured to 
receive a first certificate of service including information from an authentication and 
payment device and a digital signature through an information network'' as recited in 
independent Claim 2. 

In rejecting the above noted features of Claim 2, the Office Action relies on Claim 17 
of Boesch and asserts that the reception of an "invoice" from a merchant device is analogous 
to above noted feature. However, Claim 1 7 of Boesch further recites that the data must also 
be sent to a server for "approval," thus indicating that the merchant device is not, in fact, an 
authentication and payment device, as asserted. 

Accordingly, Applicants respectfully request that the rejection of Claim 2 (and Claims 
3 and 4, which depend therefrom) under 35 U.S.C. § 103 be withdrawn. 

Claims 1, 6, 15 and 16 were rejected under 35 U.S.C. § 103(a) as unpatentable over 
CvberCash , in view of Request for Comment 793 . Request for Comment 793 is merely a 
document describing the TCP protocol, and fails to remedy any of the deficiencies of 
CvberCash noted above. 

Accordingly, Applicants respectfully request that the rejection of Claims 1, 6, 15 and 
16 were rejected under 35 U.S.C. § 103 be withdrawn. 
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Consequently, in view of the present amendment and in light of the foregoing 

comments, it is respectfully submitted that the invention defined by Claims 1-18, is 

patentably distinguishing over the applied references. The present application is therefore 

believed to be in condition for formal allowance and an early and favorable reconsideration 

of the application is therefore requested 
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